Static task
static1
Behavioral task
behavioral1
Sample
3ee648224b581d4341f5ca4b67502539.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ee648224b581d4341f5ca4b67502539.exe
Resource
win10v2004-20231215-en
General
-
Target
3ee648224b581d4341f5ca4b67502539
-
Size
8KB
-
MD5
3ee648224b581d4341f5ca4b67502539
-
SHA1
fc94d1ea52eedbc8c2b840542333e46813819cc8
-
SHA256
e7a3ce99ac90c13c7e7f724500629c1e3b552e2d45a79c83872cc9700b001a13
-
SHA512
ba0a635e77af5b75fb853cfc9bc23e2abb8b75c9d0ba7ad4301cf8b4e34a5c6920bdc3303fafdd2fd4c1867e39d635e73102f1b2bc48ad5fed385ae1ccc776a3
-
SSDEEP
96:vwWUT8tLKP1kLT98ZLpY2nBG74fHvAlLRuVC/KCe7UlIv7UwXEhKIU3esLIEucbg:v8uL5TmFiURfvOLEeSxvDIUOpZcbI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ee648224b581d4341f5ca4b67502539
Files
-
3ee648224b581d4341f5ca4b67502539.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE